New method for secure site and user authentication

ABSTRACT

The present invention provides a new method of site and user authentication. This is achieved by creating a pop-up window on the user&#39;s PC that is in communication with a security server, and where this communication channel is separate from the communication between the user&#39;s browser and whichever web site they are at. A legitimate web site embeds code in the web page which communicates to the security server from the user&#39;s desktop. The security server checks the legitimacy of the web site and then signals both the web page on the user&#39;s browser, as well as the pop-up window to which it has a separate channel. The security server also sends a random image to both the pop-up window and the browser. If user authentication is requested by the web site the user is first authenticated by the security server for instance by out of band authentication. Then the security server computes a one time password based on a secret it shares with the web site and sends it to the pop up window. The user copies this one time password into their browser which sends it to the web site, which can re-compute the one time password to authenticate the user.

RELATED APPLICATIONS

This application claims priority based on Provisional U.S. ApplicationSer. No. 61/257,207, filed Nov. 2, 2009, and entitled “Project Seal”,the contents of which are incorporated herein in their entirety byreference.

TECHNICAL FIELD

This invention relates to security and privacy. More particularly itrelates to site and user authentication.

BACKGROUND OF THE INVENTION

Fake web sites are frequently used to trick users into revealingconfidential information. Site “seals” with a logo which the userassociates with security help give users a sense of comfort whenvisiting a legitimate web site. This is analogous to a Better BusinessBureau sticker in a physical storefront. However, on the web it istrivial for a fake site to copy such a seal. Trying to detect sites withsuch counterfeit seals and to then take down these sites is a slowprocess. Another alternative, having seals which require a user to clickon them to verify authenticity expects users to be far more proactiveand careful then they have proven to be. A somewhat more securealternative is to install a toolbar that examines each page the userdownloads and checks whether the source is a known malicious site. Thedisadvantage of this approach is that the user has to download andinstall a toolbar. Another approach that has proven not to work is theuse of the SSL infrastructure wherein users are expected to navigate amaze of locks, green bars and frequent cryptic error messages, in orderto ascertain the legitimacy of a site. When combined with the rise ofman in the middle (MITM) and man in the browser (MITB) attacks, it issafe to say that current site authentication techniques on the websimply do not work.

The converse problem of user authentication to a web site is even morechallenging. Most techniques for authentication like passwords and onetime passwords are considered vulnerable to MITM and MITB attacks.Exacerbating the situation is the notion of single sign on orfederation; namely the notion that one site will vouch for theauthenticity of the user to several other sites. A single key to openseveral doors is certainly convenient, but if that one key is weak, thenthe risk has just been amplified.

The innovation described herein seeks to use a single approach togreatly increase the security of both site and user authentication.

OBJECTIVES OF THE INVENTION

This invention has the following objectives:

-   -   Develop a site authentication “seal” technique that is not        easily defeated by counterfeit web sites, and which does not        require the user to download and install a toolbar or to click        on the seal to check its genuineness.    -   Develop a new method of user authentication based on one time        passwords which crucially does not require the provisioning of a        per user secret, but rather only requires a per relying web site        shared secret.    -   Use the new methods of site and user authentication to achieve        more secure and convenient single sign on.

Additional objects, advantages, novel features of the present inventionwill become apparent to those skilled in the art from this disclosure,including the following detailed description, as well as by practice ofthe invention. While the invention is described below with reference topreferred embodiment(s), it should be understood that the invention isnot limited thereto. Those of ordinary skill in the art having access tothe teachings herein will recognize additional implementations,modifications, and embodiments, as well as other fields of use, whichare within the scope of the invention as disclosed and claimed hereinand with respect to which the invention could be of significant utility.

SUMMARY DISCLOSURE OF THE INVENTION

Our first innovation is to create a new method of site authenticationthat is not easily counterfeited. We achieve this by creating a pop-upwindow on the user's PC that is in communication with a security server,and where this communication channel is separate from the communicationbetween the user's browser and whichever web site they are at. Alegitimate web site embeds code in the web page which communicates tothe security server from the user's desktop. The security server ensuresthe web site is not known to be malicious, and then signals both the webpage on the user's browser, as well as the pop-up window to which it hasa separate channel, that the web site is genuine. The ‘signal’ to theuser can take the form of a visual cue conveying the concepts of “goodsite” or “bad site” or “do not know”.

Our second innovation is to strengthen the security of the signalingmechanism described above by having the security server send a randomimage with the signal to both the pop-up window and the user's browser.The user who sees the image in both places gets further reassurance thatthe web site is safe.

Our third innovation ensures that counterfeiting the pop-up window ismade very difficult by having the user select a personalization imagewhich appears in the pop-up window. An attacker who tries to pop-up afake window is foiled as they cannot know the personalization image.

Our fourth innovation is to have the user authenticate to the securityserver and use the signaling mechanism described above to communicateassertions about the user's identity to the web site, thus enablingsingle sign on for the user.

Our fifth innovation is to have the security server provide the userwith a fresh one time password for authentication into the web site,where the one time password is constructed using a secret shared betweenthe web site and the security server, obviating the necessity ofmaintaining a per user shared secret which is a requirement for previousone time password mechanisms.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 describes the main components of the system. FIG. 2 shows thesystem augmented with user authentication, in this case achieved usingout of band authentication.

PREFERRED EMBODIMENT(S) OF THE INVENTION

We will first describe the preferred embodiment for site authenticationand then describe how the system can be augmented to also perform userauthentication. As shown in Figure-1 the system consists of thefollowing components:

-   -   A security server.    -   A pop-up window on the user's desktop.    -   A browser on the user's desktop.    -   The web site the user is browsing.

There are three distinct phases of operation: (i) the set-up andpersonalization of the pop-up window which is a one time process, (ii)the start-up of the pop-up window which happens at periodic intervals(akin to logging into a computer at each use), and (iii) The wake-upprocess when the user browses to a web site that can authenticate itselfto the user using the security server.

For set-up the user visits a web site hosted at the security server andselects a personalization image. This image is stored locally on theuser's PC using cookies, FLASH storage or similar local storage options.This is in general a one time event per user per PC, and only need berepeated if the user wants to change the personalization image, or thelocal storage is deleted for some reason.

Start-up occurs at periodic events. For instance this could happen oncea day before the user begins browsing the web. The user can initiate theprocess manually, via a bookmark or bookmarklet, or by using the user'sdefault web page mechanism. Alternately, there could be wake-up codewhich is triggered by the user visiting a web site that uses the system.Once the pop-up has been started it will be on the user's desktopoccupying a relatively small amount of space. Typically the user willposition the pop-up at a convenient location on their screen. The act ofstarting up the pop-up also results in the security server planting alocal session object (for instance in a session cookie) on the user'sPC.

A web site that wishes to participate in the system will embed on thepage code to access the system. Typically this will be in the form ofJavascript code within an iFrame. The code will reach out to thesecurity server, an act that transfers to the security server, thepreviously planted session object. The security server checks theREFERRER or ORIGIN tag of the request from the iFrame against a knownwhitelist or blacklist of permitted/prohibited sites. It then respondsto the iFrame and simultaneously signals the pop-up it is incommunication with. The signal consists of two parts, first anindication of whether the web site is “good”, “bad”, or that thesecurity server “does not know”. The second part of the signal is arandom image that is sent (if the site is legitimate) to the pop-up andto the iFrame. For a legitimate web site the user's pop-up will have avisual cue (e.g. a green light) that the web site is “good” and willshow a random image. The iFrame will also show a similar visual cue andcritically will also show the same random image. If the web site was ona black list the pop-up will show a visual cue (e.g. a red light) thatindicates the site is “bad”.

Attackers trying to defeat the system by creating a fake pop-up arethwarted because they will not know the personalization image. And, anattacker who tries to display the visual cue in the iFrame will notsucceed as they do not know the random image that is sent to the pop-up.

Finally, a counterfeit web site will not be able to manipulate theREFERRER or ORIGIN tag as it is inspected by the browser.

The communication between the pop-up and the security server can beimplemented in a variety of ways. One approach would be to have thepop-up repeatedly make XHR requests with long time outs. Consequentlywhenever the security server has a need to send a message to the pop-upand simply opens to the currently open XHR request.

The system described above can be extended to communicate assertionsabout the user from the security server to the web server. We assumethat the user, preferably during start-up, uses some method ofauthenticating to the security server. For instance the user could provepossession of credentials issued previously or use an out of bandauthentication technique to prove possession of a phone number. Oncethis has happened the security server is in a position to respond torequests for identity assertions from the web site. One way to achievethis would simply be for the web site to send the security server anassertion request, for instance via the request in the iFrame, and thesecurity server can simply respond with the assertion. This requestresponse could use the format of standards such as OpenID or SAML. Thismarries site authentication to user authentication (something thatfederation protocols like OpenID and SAML do not address) which providessignificant security benefits.

A final innovation allows us to significantly strengthen the bindingbetween the user, the security server acting as an Identity Provider andthe web site which is the Relying Party. First, we assume that thesecurity server and the web site have a priori agreed on a shared secret(the system is easily extended to use public key cryptography). Second,as shown in FIG. 2, we assume that the user has used some method, forinstance out of band authentication, to authenticate to the securityserver. When the user is at a web site that requests authentication, andthe web site communicates this request to the security server, thesecurity server calculates a one time password as a function of thesecret shared with the web site and some other information, and displaysit to the user in the pop-up window. The user enters (perhaps by cuttingand pasting) this one time password into the web site, which confirmsauthenticity by re-computing the one time password. This system has allthe security properties of one time passwords, yet has the tremendousadvantage that it does not require a shared secret with each user, andit is only the security server and the web sites that need sharedsecrets for the purpose of generating one time passwords. The actual onetime password can be constructed based on a time stamp or a counterbased OTP algorithm (in the way we use these algorithms the time orcounter value needs to be communicated by the security server to the website; or potentially computed deterministically using some agreed uponformula).

1.-7. (canceled)
 8. A method of authenticating a site on a network,comprising: receiving, by a security server from a web page that is (i)associated with a network site and (ii) displayed by a user's networkdevice, an identifier of the user's network device and an identifier ofthe network site; and transmitting, by the security server in responseto the receipt of the identifiers, an indication of legitimacy of thenetwork site that will cause display of a corresponding legitimacyindicator on both the web page and a pop-up window displayed by theuser's network device.
 9. The method of claim 8, further comprising:determining, by the security server, the legitimacy of the network sitebased on the received network site identifier.
 10. The method of claim8, further comprising: storing, by the security server on the user'snetwork device, a local session object; wherein the received user'snetwork device identifier includes the stored local session object. 11.The method of claim 8, wherein the received network site identifierincludes a network address of the network site included in the displayedweb page.
 12. The method of claim 8, wherein: if the transmittedindication indicates that the network site is legitimate, thecorresponding legitimacy indicator includes a first type visual cue in afirst state; and if the transmitted indication indicates that thenetwork site is illegitimate, the corresponding legitimacy indicatorincludes the first type visual cue in a second state.
 13. The method ofclaim 12, further comprising: if the transmitted indication indicatesthat the network site is legitimate, the corresponding legitimacyindicator also includes a second type visual cue for display on both theweb page and the pop-up window.
 14. The method of claim 13, wherein thesecond type visual cue is a random image.
 15. An article of manufacturefor authenticating a site on a network, comprising: non-transitorystorage medium; and logic stored on the storage medium, wherein thestored logic is configured to be readable by a processor and therebycause the processor to operate so as to: receive, from a web page thatis (i) associated with a network site and (ii) displayed by a user'snetwork device, an identifier of the user's network device and anidentifier of the network site; and transmit, in response to the receiptof the identifiers, an indication of legitimacy of the network site thatwill cause display of a corresponding legitimacy indicator on both theweb page and a pop-up window displayed by the user's network device. 16.The article of manufacture of claim 15, wherein the stored logic isfurther configured to cause the processor to operate so as to: determinethe legitimacy of the network site based on the received network siteidentifier.
 17. The article of manufacture of claim 15, wherein: thestored logic is further configured to cause the processor to operate soas to store a local session object on the user's network device; and thereceived user's network device identifier includes the stored localsession object.
 18. The article of manufacture of claim 15, wherein thereceived network site identifier includes a network address of thenetwork site included in the displayed web page.
 19. The article ofmanufacture of claim 15, wherein: if the transmitted indicationindicates that the network site is legitimate, the correspondinglegitimacy indicator includes a first type visual cue in a first state;and if the transmitted indication indicates that the network site isillegitimate, the corresponding legitimacy indicator includes the firsttype visual cue in a second state.
 20. The article of manufacture ofclaim 19, wherein, if the transmitted indication indicates that thenetwork site is legitimate, the corresponding legitimacy indicator alsoincludes a second type visual cue for display on both the web page andthe pop-up window.
 21. A machine for authenticating a site on a network,comprising: a communications port configured to receive, from a web pagethat is (i) associated with a network site and (ii) displayed by auser's network device, an identifier of the user's network device and anidentifier of the network site; and a processor configured with logic todetermine the legitimacy of the network site based on the receivednetwork site identifier and to direct transmission of an indication oflegitimacy of the network site that will cause display of acorresponding legitimacy indicator on both the web page and a pop-upwindow displayed by the user's network device.
 22. The system of claim21, wherein: the processor is further configured to direct the storageof a local session object on the user's network device; and the receiveduser's network device identifier includes the stored local sessionobject.
 23. The system of claim 21, wherein the received network siteidentifier includes a network address of the network site included inthe displayed web page.
 24. The system of claim 21, wherein: if thenetwork site is determined to be legitimate, the correspondinglegitimacy indicator includes a first type visual cue in a first state;and if the network site is determined to be illegitimate, thecorresponding legitimacy indicator includes the first type visual cue ina second state.
 25. The system of claim 24 wherein, if the network siteis determined to be legitimate, the corresponding legitimacy indicatoralso includes a second type visual cue for display on both the web pageand the pop-up window.
 26. A method of authenticating a site on anetwork, comprising: displaying, at a user's network device, a web pageassociated with a network site and a pop up window associated with asecurity server; transmitting, from the web page to the security server,an identifier of the user's network device and an identifier of thenetwork site; receiving, by the user's network device from the securityserver in response to the transmission of the identifiers, an indicationof legitimacy of the network site; and displaying, at a user's networkdevice, a legitimacy indicator corresponding to the received indicationof legitimacy on both the web page and the pop-up.
 27. The method ofclaim 26, further comprising: executing code embedded in the web page;wherein the user's network device identifier and the network siteidentifier are transmitted based on the execution of the embedded webpage code.
 28. The method of claim 26, further comprising: if thereceived indication of legitimacy indicates that the network site islegitimate, the corresponding legitimacy indicator includes a first typevisual cue in a first state and a second type visual cue; and if thereceived indication of legitimacy indicates that the network site isillegitimate, the corresponding legitimacy indicator includes the firsttype visual cue in a second state.
 29. The method of claim 26, furthercomprising: receiving, at the user's network device, a user selection ofa personalized image; storing the selected personalized image at theuser's network device; and displaying the stored personalized image onthe pop-up window.